Analysis as of July 28, 2026 indicates that the domain unsiker.cc was registered on October 07, 2025 through Gname.com Pte. Ltd. The domain resolves to the IPv4 address 188.114.96.3 and is delegated to Cloudflare name servers amy.ns.cloudflare.com and cleo.ns.cloudflare.com, suggesting that the hosting infrastructure is served via Cloudflare’s CDN and DDoS mitigation services. VirusTotal has recorded detections from six of ninety‑one scanning engines, confirming that the domain is flagged by multiple security products. The domain appears on three public blocklists and is presently listed as blocked by PhishDestroy, MetaMask, and SEAL, indicating that at least three independent anti‑phishing services have taken it down in their filtering layers. The domain is still active, with DNS resolution continuing at the time of analysis.
The publicly available intelligence does not include a retrieved page title, SSL certificate details, HTTP response codes, or any observed brand or kit identifiers, so the exact content and technique employed by the site remain unverified. Consequently, the precise phishing vector—whether credential harvesting, malicious download, or other—cannot be confirmed beyond the generic phishing classification. Defenders should therefore treat unsiker.cc as a high‑risk indicator.
Recommended mitigations include adding the domain and its resolving IP address to firewall and proxy deny lists, ensuring that endpoint protection solutions subscribe to the blocklists that already flag the domain, and monitoring DNS queries for any further resolution to 188.114.96.3. Continuous re‑scanning of the domain on malware analysis platforms is advised to capture any evolution of payloads or additional detections. Organizations should also consider reviewing email gateway logs for messages containing unsiker.cc URLs, as the domain’s recent creation date and active status suggest ongoing phishing campaign activity.